English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Security practices in large organizations are notoriously difficult toassess. The challenge only increases when organizations turn to third partiesto provide technology and business services, which typically require tightnetwork integration and sharing of confidential data, potentially increasingthe organization's attack surface. The security maturity of an organizationdescribes how well it mitigates known risks and responds to new threats. Today,maturity is typically assessed with audits and questionnaires, which aredifficult to quantify, lack objectivity, and may not reflect current threats.  This paper demonstrates how external measurement of an organization can beused to assess the relative quality of security among organizations. Using alarge dataset from BitSight(www.bitsight.com), a cybersecurity ratings company,containing 3.2 billion measurements spanning nearly 37,000 organizationscollected during calendar year 2015, we show how per-organizational "riskvectors" can be constructed that may be related to an organization's overallsecurity posture, or maturity. Using statistical analysis, we then study thecorrelation between the risk vectors and botnet infections. For example, wefind that misconfigured TLS services, publicly available unsecured protocols,and the use of peer-to-peer file sharing correlate with organizations that haveincreased rates of botnet infections. We argue that the methodology used toidentify these correlations can easily be applied to other data to provide agrowing picture of organizational security using external measurement.

Risky Business: Assessing Security with External Measurements